Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.mft
File:                     oiw84jcbnyHFfgw6V4fZWnNctQA.mft (raw, json)
Hash identifier:          OOaVUTsmChk3waY3uhQ+zSiJ5nUtmR1mlvdytNegI5U=
Subject key identifier:   92:1F:DC:CB:71:CE:69:5D:79:0D:FD:4F:B0:1C:58:64:EE:F5:F6:F3
Authority key identifier: A2:2C:3C:E2:37:1B:9F:21:C5:7E:0C:3A:57:87:D9:5A:73:5C:B5:00
Certificate issuer:       /CN=a22c3ce2371b9f21c57e0c3a5787d95a735cb500
Certificate serial:       01962E2B144353DD32D430AD46BFA08F7DDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oiw84jcbnyHFfgw6V4fZWnNctQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.mft
Manifest number:          0EE4
Signing time:             Sun 13 Apr 2025 08:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:36 +0000
Files and hashes:         1: U4H4DXiB1R3t2sbazcIxIzp8LJM.roa (hash: d9YRAg9H/qZYSSHmjXFBkp2EkGuj36QH5Z/4fdmKOEA=)
                          2: oiw84jcbnyHFfgw6V4fZWnNctQA.crl (hash: R1UtG4RuqY2kY5ZTsSK3q7rY90qEfxDTmFcPLm3YTaw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:14:43:53:dd:32:d4:30:ad:46:bf:a0:8f:7d:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22c3ce2371b9f21c57e0c3a5787d95a735cb500
        Validity
            Not Before: Apr 13 08:01:36 2025 GMT
            Not After : Apr 14 08:01:36 2025 GMT
        Subject: CN=921fdccb71ce695d790dfd4fb01c5864eef5f6f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:86:6b:0b:22:33:8e:b1:61:bb:7a:d2:32:6f:
                    5e:f4:cd:b5:02:97:39:ea:d6:37:46:f7:c9:a8:18:
                    22:c7:d6:40:de:87:fe:7d:5e:63:54:24:e2:45:83:
                    b4:ff:79:ee:a4:5c:f0:55:06:e9:26:8b:e2:88:74:
                    90:95:37:a5:a6:b9:ed:e5:6c:f0:8a:c2:eb:3d:97:
                    d5:4f:bb:b4:d1:b0:05:06:e3:03:4a:9b:99:ae:24:
                    8b:50:b2:80:74:de:b1:5b:70:ef:b7:be:77:68:6f:
                    99:65:e1:c1:d9:11:b1:2a:b8:c5:a2:c0:2a:93:96:
                    b4:9d:69:02:ba:26:c4:ee:c6:e5:49:d1:d2:e9:32:
                    47:48:2c:db:6e:30:78:9f:57:e3:58:a9:6b:c0:47:
                    96:c5:63:75:a8:b8:93:9d:94:31:3d:16:59:4c:d7:
                    ce:a2:e5:de:27:a3:fb:43:e2:c6:d5:54:31:cd:21:
                    da:7e:55:33:32:68:a1:54:73:3f:bf:7e:fc:c6:bb:
                    90:6e:af:de:f8:9a:27:f8:cc:07:54:85:24:2a:4b:
                    07:50:f1:73:22:7d:da:89:59:44:5a:5c:2e:eb:c9:
                    25:eb:d6:fc:83:86:4e:ff:d0:22:18:e0:c4:57:2a:
                    8a:ac:56:03:92:c1:32:fc:c0:b4:e1:2d:58:62:5a:
                    65:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:1F:DC:CB:71:CE:69:5D:79:0D:FD:4F:B0:1C:58:64:EE:F5:F6:F3
            X509v3 Authority Key Identifier:
                keyid:A2:2C:3C:E2:37:1B:9F:21:C5:7E:0C:3A:57:87:D9:5A:73:5C:B5:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oiw84jcbnyHFfgw6V4fZWnNctQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:aa:50:9d:15:14:6f:a6:70:4d:e7:31:48:b2:d8:48:9c:57:
         5a:06:6c:54:fc:f1:71:04:fd:1b:13:db:1f:92:f5:98:98:2a:
         cf:50:e9:9a:c1:42:83:b7:47:1a:9e:9f:d8:99:b8:58:7d:50:
         51:18:f7:73:cc:c3:06:7f:92:70:2d:7f:b9:ff:37:f0:42:c9:
         e6:ac:68:6b:1b:b9:b7:93:a7:4e:7d:62:3f:65:b4:59:81:7b:
         6f:48:6e:ac:51:cf:46:96:77:5a:71:32:f3:f2:2b:68:cb:a6:
         68:1f:35:e7:97:9d:f7:52:41:05:2a:50:42:90:3f:0e:39:9c:
         df:2c:a4:0f:73:61:cc:f5:39:8c:d1:14:bb:58:11:9f:92:ce:
         21:cf:5f:5c:d1:56:7b:d8:8f:61:e6:4e:46:61:08:98:7c:81:
         5c:ad:5b:08:1c:56:79:4b:6e:82:fb:00:4a:0f:5b:ae:33:4b:
         be:ba:83:c4:bc:57:0a:93:32:8f:74:79:f7:ac:79:7d:f8:0e:
         a6:bf:b1:8a:1a:5b:42:ff:85:e9:d6:e2:1d:0f:c1:a8:e7:18:
         e7:dc:3e:3f:c4:92:f1:06:4a:28:b5:5d:02:58:cd:9f:ac:a3:
         83:ce:a9:6f:e2:56:52:a8:a6:75:40:cd:46:c7:8a:ac:c2:9b:
         94:98:c5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----